--- imp4-4.1.3.orig/lib/IMP.php +++ imp4-4.1.3/lib/IMP.php @@ -175,7 +175,7 @@ require IMP_BASE . '/config/servers.php'; $auto_server = IMP::getAutoLoginServer(); - if (is_null($server_key)) { + if (!isset($server_key)) { $server_key = $auto_server; } --- imp4-4.1.3.orig/templates/menu.inc +++ imp4-4.1.3/templates/menu.inc @@ -3,54 +3,56 @@ $prefs->getValue('use_trash') && ($prefs->getValue('trash_folder') !== null) && $prefs->getValue('empty_trash_menu')); -$menu_spam = (($imp['base_protocol'] != 'pop3') && - ($prefs->getValue('spam_folder') !== null) && - $prefs->getValue('empty_spam_menu')); $menu_view = $prefs->getValue('menu_view'); -$accesskey = $prefs->getValue('widget_accesskey') ? Horde::getAccessKey(_("Open Fo_lder")) : ''; +$accesskey = $prefs->getValue('widget_accesskey') ? Horde::getAccessKey(_("Ope_n Folder")) : ''; ?> -
+
- - + + --- imp4-4.1.3.orig/debian/README.Debian +++ imp4-4.1.3/debian/README.Debian @@ -0,0 +1,221 @@ +imp4 for Debian +--------------- + +To configure this package use the horde3 web configuration. To let +it write to the configuration files you have to change the owner +of the /etc/horde/imp4 dir and config files to be owned by www-data. + +If you do not do that you have to cut from the web configuration +program and paste into the config file yourself. + +The reason why this is not the default option is, that allow writing +to configuration files without any authentication is a big +security hole. + +..................................................................... + +Some notes from upstream INSTALL document follow here: + +Prerequisites +============= + +To function properly, IMP **REQUIRES** the following: + +1. The following PHP capabilities: + + a. File Upload Support + + File upload support is **required** to allow attachments in mail + composition and to allow various importing features to work (e.g. + importing PGP or S/MIME keys, importing mbox files). To enable file + upload support: + + 1. In your php.ini file, the following line **must** be present:: + + file_uploads = On + + 2. Your temporary upload directory **must** be writable to the user + the web server is running as. If you leave the configuration + option ``upload_tmp_dir`` blank in ``php.ini``, PHP will use the + default directory compiled into it (normally ``/tmp`` on + Unix-like systems). + + 3. Set the maximum size of the uploaded files via the + ``upload_max_filesize`` configuration option in ``php.ini``. For + example, to allow 5 MB attachments, place the following line in + your ``php.ini`` file:: + + upload_max_filesize = 5M + + If either ``file_uploads`` is turned off, or your temporary upload + directory is *not* writable by the server, all file upload + functionality will be disabled by Horde/IMP and will not be available + to the user. + + The following PHP options are **RECOMMENDED** to enable advanced features in + IMP: + + a. OpenSSL support ``--with-openssl`` + + The OpenSSL module is used by IMP to provide S/MIME functionality. + Without the module, S/MIME options will be disabled. + + +2. The following PEAR modules: + + a. HTTP_Request [OPTIONAL] + + HTTP_Request is required to use the HTML composition mode. + +3. At least one IMAP or POP3 server. + + While IMP is an application that is installed on a Web server and is run + from a Web browser, it is only an IMAP and POP3 *client*, like Eudora or + Outlook Express. You must have access to an IMAP or POP3 server (or + multiple servers) on which your users' mail is stored in order to use IMP. + + IMAP is recommended over POP3 in order to let users maintain mail folders + other than INBOX. IMAP is also *much* faster than POP3 in displaying a + mailbox of messages. In short, do not use POP3 unless IMAP is not + available. + + Freely available IMAP servers (for \*nix systems) that have been verified + to work with IMP include: + + - UW-IMAP (ftp://ftp.cac.washington.edu/imap/) + - Courier-IMAP (http://www.inter7.com/courierimap.html) + - Cyrus (http://asg.web.cmu.edu/cyrus/) + - Dovecot (http://dovecot.procontrol.fi/) + +The following items are not required, but are strongly **RECOMMENDED**: +==================================== + +1. Sendmail or equivalent. + + While Horde can inject mail via either a local sendmail or a remote SMTP + server, sendmail is recommended for use with IMP for improved performance + and error handling/reporting, as well as a more accurate mail envelope. + + The mail transport settings are set in the Horde configuration, so further + documentation can be found there. + +2. Ispell, or a drop-in replacement. + + Ispell, or its enhanced cousin aspell, is used as IMP's spell-checking + engine. You must install one of these, or a similar program with an + ispell-compatible interface, to use IMP's spell-check feature. + +Configuring IMP +=============== + +1. Configuring Horde for IMP + + a. Enable IMP authentication [OPTIONAL] + + If you would prefer that your users authenticate directly with IMP, + without having to authenticate through Horde first, load the + ``Administration/Configuration/Authentication`` page and from the ``What + backend should we use for authenticating users to Horde`` pulldown menu + select ``Let a Horde application handle authentication``. (Please see + the second note below.) Select ``imp`` from the ``The application which + is providing authentication`` pulldown menu. + + .. Note:: **You will have to log in twice if you don't do this** -- Once + to Horde and a second time to IMP. + + .. Note:: If this is a new install, you will not be able to configure + IMP using the Horde Administration/Configuration page if you + first enabled IMP authentication for Horde. You must set + Horde to use another authentication method (refer to the + `horde/docs/INSTALL`_ file), configure IMP, then reset Horde + to use IMP authentication. One way to reset Horde in order to + reach the Administration page is to replace the Horde + configuration file ``conf.php`` with the original in + ``horde/config/conf.php.dist``. You should of course back up + your current settings since they will otherwise be permanently + lost. + +2. Configuring IMP. + + You must be sure to list your IMAP/POP3 server names and configuration + information in ``servers.php`` (unless you demand that the user specify his + own at login). + + You must login to Horde as a Horde Administrator to finish the + configuration of IMP. Use the Horde ``Administration`` menu item to get to + the administration page, and then click on the ``Configuration`` icon to + get the configuration page. Select ``Mail`` from the selection list of + applications. Fill in or change any configuration values as needed. When + done click on ``Generate Mail Configuration`` to generate the ``conf.php`` + file. If your web server doesn't have write permissions to the IMP + configuration directory or file, it will not be able to write the file. In + this case, go back to ``Configuration`` and choose one of the other methods + to create the configuration file ``imp/config/conf.php``. + + Note for international users: IMP uses GNU gettext to provide local + translations of text displayed by applications; the translations are found + in the ``po/`` directory. If a translation is not yet available for your + locale (and you wish to create one), see the ``horde/po/README`` file, or + if you're having trouble using a provided translation, please see the + `horde/docs/TRANSLATIONS`_ file for instructions. + + IMP Configuration Pointers + + * If you would like IMP to scan all text messages for UUencoded data, you + must make change this line in ``imp/config/mime_drivers.php``:: + + $mime_drivers['imp']['plain']['uuencode'] = true; + + Note that this is a performance hit since *every* text body must be + scanned in its entriety to look for uuencoded data. Therefore, this + feature is disabled by default. + +3. Securing IMP + + Before you can secure IMP, you need a secure Horde installation. Please + read the file in `horde/docs/SECURITY`_ for Horde security information + before proceeding. + + There are two channels by which, unless steps are taken to avoid it, IMP + encourages users to pass their IMAP and POP3 passwords around the Internet + unencrypted. + + The first channel is between their browser and the Web server. We strongly + recommend using an SSL-capable Web server to give users the option of + encrypting communications between their browser and the Web server on which + IMP is running; some sites may wish to disable non-SSL access entirely. + + The second channel is between the Web server and their IMAP or POP3 server. + The simplest way to avoid this is to have the mail server running on the + same system as the Web server, and configuring IMP to connect to the IMAP + or POP3 server on ``localhost`` instead of on the Internet hostname. In + cases where that is not possible, we recommend using IMAP-SSL or POP3-SSL + to ensure that users' passwords remain safe after they have entrusted them + to IMP. + + Other security steps you can take to increase security include: + + * Use session cookies instead or URL based sessions. + * Set your php ``session.entropy_length`` to a larger value (e.g. 16) and + ``session.entropy_file`` to a random source (e.g. ``/dev/urandom``) + * Enable and use the php mycrypt extension. + * If your database, mail server, and web server are on the same host + machine, then: + + * use unix socket database access and disable tcp database access. + * use ``localhost`` for all TCP/IP connections to avoid the network. + * use the command-line sendmail for sending mail if possible. + +4. Testing IMP + + Use IMP to login to a known working IMAP or POP3 server. Test at least the + following: + + - Sending mail (via the ``Compose`` item in the menu bar). + - Setting preferences (check to see if they survive after logging out and + back in, if you are using an SQL or LDAP preferences system). + - Reading mail. + - Changing folders. + + + -- Jose Carlos , Mon, 21 Feb 2005 15:09:49 -0300 --- imp4-4.1.3.orig/debian/compat +++ imp4-4.1.3/debian/compat @@ -0,0 +1 @@ +4 --- imp4-4.1.3.orig/debian/copyright +++ imp4-4.1.3/debian/copyright @@ -0,0 +1,26 @@ +This package was debianized by Jose Carlos Medeiros on +Mon, 21 Feb 2005 15:09:49 -0300. + +It was downloaded from + http://ftp.horde.org/pub/horde/ + +Upstream Authors: + See /usr/share/doc/horde3/CREDITS + +Copyright: + +This program is free software; you may redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation; either version 2, or (at your option) +any later version. + +This is distributed in the hope that it will be useful, but without +any warranty; without even the implied warranty of merchantability or +fitness for a particular purpose. See the GNU General Public License +for more details. + +A copy of the GNU General Public License is available as +/usr/share/common-licenses/GPL in the Debian GNU/Linux distribution or +on the World Wide Web at http://www.gnu.org/copyleft/gpl.html. You can +also obtain it by writing to the Free Software Foundation, Inc., +51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. --- imp4-4.1.3.orig/debian/dirs +++ imp4-4.1.3/debian/dirs @@ -0,0 +1,2 @@ +usr/share/horde3/imp +etc/horde/imp4 --- imp4-4.1.3.orig/debian/docs +++ imp4-4.1.3/debian/docs @@ -0,0 +1,2 @@ +README +docs/* --- imp4-4.1.3.orig/debian/examples +++ imp4-4.1.3/debian/examples @@ -0,0 +1,4 @@ +config/ +po/ +scripts/ + --- imp4-4.1.3.orig/debian/watch +++ imp4-4.1.3/debian/watch @@ -0,0 +1,2 @@ +version=2 +http://ftp.horde.org/pub/imp/imp-h3-([\d\.]*)\.tar\.gz --- imp4-4.1.3.orig/debian/rules +++ imp4-4.1.3/debian/rules @@ -0,0 +1,101 @@ +#!/usr/bin/make -f + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + +# List all Files and directories here that should not be copied to +COPY_EXCLUDE=^(build-stamp|configure-stamp|config|COPYING|debian|docs|po|README|scripts|{arch})$ + +configure: configure-stamp +configure-stamp: + dh_testdir + touch configure-stamp + +build: build-stamp + +build-stamp: configure-stamp + dh_testdir + touch build-stamp + +clean: + dh_testdir + dh_testroot + dh_clean build-stamp configure-stamp + +install: build + dh_testdir + dh_testroot + dh_clean -k + dh_installdirs + + # Add here commands to install the package into debian/imp4. + #### copy files #### + for i in $$(ls -1 | egrep -v "$(COPY_EXCLUDE)"); do \ + echo install $$i ; \ + cp -a $$i debian/imp4/usr/share/horde3/imp ; \ + done + + #### copy configuration files #### + for i in config/*.dist; do \ + NAME=etc/horde/imp4/$$(basename $$i ".dist"); \ + cp -a $$i debian/imp4/$$NAME; \ + done + cp config/conf.xml debian/imp4/etc/horde/imp4/ + touch debian/imp4/etc/horde/imp4/conf.php +# touch debian/imp4/etc/horde/imp4/conf.php.bak +# chown www-data:root debian/imp4/etc/horde/imp4/conf.php +# chown www-data:root debian/imp4/etc/horde/imp4/conf.php.bak + dh_link etc/horde/imp4 usr/share/horde3/imp/config + + #### create htaccess to restrict acess by web #### + echo "Deny from all" > debian/imp4/etc/horde/imp4/.htaccess + + #### change made for program run with no problems ### + # change HORDE_BASE in php files + # change /usr/local/bin/php to /usr/bin/php + # change IMP_BASE in php files + for i in $$(find debian/imp4 -name "*.php"); do \ + cat $$i | \ + sed -e "s/define('HORDE_BASE'.*;/define\('HORDE_BASE', '\/usr\/share\/horde3\'\);/" |\ + sed -e "s/define('IMP_BASE'.*;/define\('IMP_BASE', '\/usr\/share\/horde3\/imp'\);/" |\ + sed -e "s/\/usr\/local\/bin/\/usr\/bin/" > $$i.rew; \ + cat $$i.rew > $$i; \ + rm -f $$i.rew; \ + done + + #### change permissions of scripts #### + for i in $$(find debian/imp4/usr/share/horde3/imp -type f | \ + xargs grep '^#!\/' |cut -d: -f1); do \ + chmod u+x $$i; \ + done + chmod -x debian/imp4/usr/share/horde3/imp/locale/da_DK/help.xml + #### end #### + +# Build architecture-independent files here. +binary-indep: build install +# We have nothing to do by default. + +# Build architecture-dependent files here. +binary-arch: build install + dh_testdir + dh_testroot + dh_installchangelogs + dh_installdocs -XINSTALL + mv debian/imp4/usr/share/doc/imp4/CHANGES \ + debian/imp4/usr/share/doc/imp4/changelog + dh_installexamples + -find debian/imp4 -depth -name ".arch-ids" -exec rm -Rf {} \; + dh_link + dh_strip + dh_compress + dh_fixperms +# -Xdebian/imp4/etc/horde/imp4/conf.php \ +# -Xdebian/imp4/etc/horde/imp4/conf.php.bak + dh_installdeb + dh_shlibdeps + dh_gencontrol + dh_md5sums + dh_builddeb + +binary: binary-indep binary-arch +.PHONY: build clean binary-indep binary-arch binary install configure --- imp4-4.1.3.orig/debian/changelog +++ imp4-4.1.3/debian/changelog @@ -0,0 +1,88 @@ +imp4 (4.1.3-2) unstable; urgency=medium + + * Depend on php-mail-mime (closes: #408615) + + -- Lionel Elie Mamane Sat, 27 Jan 2007 19:34:08 +0100 + +imp4 (4.1.3-1) unstable; urgency=low + + * New upstream version. This is a bugfix release to correct + CVE-2006-4255. + * Updated to standards version 3.7.2. + + -- Ola Lundqvist Sun, 3 Sep 2006 12:47:24 +0200 + +imp4 (4.1.1-2) unstable; urgency=low + + * Put debhelper in Build-Depends, not B-D-Indep. + + -- Lionel Elie Mamane Fri, 16 Jun 2006 10:59:39 +0200 + +imp4 (4.1.1-1) unstable; urgency=low + + * New upstream version 4.1.1, closes: #356527. + + -- Ola Lundqvist Mon, 24 Apr 2006 22:12:44 +0200 + +imp4 (4.0.4-3) unstable; urgency=low + + * Added support for php5-imap as an alternative for php4-imap. + + -- Ola Lundqvist Sat, 25 Feb 2006 13:18:27 +0100 + +imp4 (4.0.4-2) unstable; urgency=low + + * Set Maintainer to Debian Horde Team. + * Make locales package recommended, closes: #320139. + * Added {arch} to copy exclude list to be able to build from tla + repository. + * Added a clean line to debian rules to make sure it is possible to + build nice with tla-buildpacakge. + + -- Ola Lundqvist Sun, 19 Feb 2006 15:59:55 +0100 + +imp4 (4.0.4-1) unstable; urgency=low + + * New upstream release. + * Added imapproxy to suggests list, closes: #326067. + * Removed false part about *spell in README.Debian, closes: #326572. + * Applied patch from Rob Andrews to fix problem + in Mozilla, closes: #318649. + * Updated standards version to 3.6.2. + * Corrected to new FSF address. + + -- Ola Lundqvist Sat, 5 Nov 2005 16:10:36 +0100 + +imp4 (4.0.3-1) unstable; urgency=low + + * New upstream release, closes: #304286. + + -- Ola Lundqvist Sun, 1 May 2005 21:43:26 +0200 + +imp4 (4.0.2-2) unstable; urgency=low + + * Changed build depends to build depends indep. + * Changed recommends of aspell, ispell to suggests. + * Updated README.Debian file to document what you have to do in + order to make the horde3 web configuration work as expected. + * Updated rules file to avoid unnecessary copy of COPYING file. + * Removed empty debian/pre* and debian/post* files. + + -- Ola Lundqvist Sun, 10 Apr 2005 20:55:08 +0200 + +imp4 (4.0.2-1) unstable; urgency=low + + * Initial upload of this package, closes: #303114. + * Updated Maintainer field and made Jose Carlos Medeiros co maintainer. + * Moved config from etc/horde/imp4/config to etc/horde/imp4. + * Commented out the www-data security hole that exist in initial configuration. + * Made sure that ./usr/share/horde3/imp/locale/da_DK/help.xml is + not executeable. + + -- Ola Lundqvist Tue, 5 Apr 2005 17:19:20 +0200 + +imp4 (4.0.2-0) unstable; urgency=low + + * Initial Release, prepared. + + -- Jose Carlos Medeiros Mon, 21 Feb 2005 15:09:49 -0300 --- imp4-4.1.3.orig/debian/control +++ imp4-4.1.3/debian/control @@ -0,0 +1,22 @@ +Source: imp4 +Section: web +Priority: optional +Maintainer: Horde Maintainers +Uploaders: Ola Lundqvist , Lionel Elie Mamane +Build-Depends: debhelper (>= 4.0.0) +Standards-Version: 3.7.2 + +Package: imp4 +Architecture: all +Depends: ${shlibs:Depends}, ${misc:Depends}, horde3 (>= 3.1.1), php4-imap | php5-imap, php-mail-mime +Recommends: locales +Suggests: ingo1, kronolith2, turba2, aspell, ispell, imapproxy +Description: webmail component for horde framework + IMP is the Internet Messaging Program (formerly, among other things, the IMAP + webMail Program), a PHP-based webmail system and a component of the Horde + project. IMP, once installed, accesses mail over IMAP thus requiring little + to no special preparations on the server on which mail is stored. + . + IMP offers most of the features users have come to expect from their + conventional mail programs, including attachments, spell-check, address books, + multiple folders, and multiple-language support.